DD Support Board and Research Team

[Sleepy2016]

the most likely way a hacker got access via Edgar is by having a zero day exploit in a pdf file

No, PDF exploits have to be executed through a client reader (Adobe Acrobat, etc). Simply having an infected PDF on your PC will not execute it. Besides, what's the point of uploading an infected document if you've already hacked the system?

If infected PDF's were uploaded to Edgar we'd have heard about it before now from all of the people opening them on their own PC's.

We also would have heard about it by now if hackers were uploading fraudulent announcements.

As someone else mentioned, hacking Edgar is only useful for harvesting identity info and maybe getting a few minutes notice of a filing upload before the rest of the world sees it.